Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.64%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityPatch nowKEVEPSS 98.69%Jan 29, 2026
- UnknownUncontrolled Resource ConsumptionPatch nowKEVEPSS 0.28%Jan 29, 2026
- Unknownparallels h-sphere Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.30%Jan 29, 2026
- Unknowntriliumnotes trilium Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.92%Jan 29, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 84.18%Jan 28, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityPatch nowKEVEPSS 73.56%Jan 28, 2026
- Critical9.8Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 85.80%Jan 27, 2026
- UnknownWeaver e-cology Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 0.98%Jan 27, 2026
- High7.8Microsoft Office Security Feature Bypass VulnerabilityPatch nowKEVEPSS 70.80%Jan 26, 2026
- Unknownsoftlabbd integrate_google_drive Missing AuthorizationPatch nowKEVEPSS 7.33%Jan 26, 2026
- UnknownNETGEAR Routers FunJSQ VulnerabilityPatch nowKEVEPSS 2.54%Jan 26, 2026
- UnknownGoogle Chrome Improper Input ValidationPatch nowKEVEPSS 99.59%Jan 26, 2026
- UnknownApache continuum Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 4.13%Jan 26, 2026
- Unknownphpjabbers food_delivery_script Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.32%Jan 25, 2026
- UnknownImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 2.82%Jan 25, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 88.18%Jan 23, 2026
- Unknownbelkin f9k1122_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 19.94%Jan 23, 2026
- UnknownWPS Hide Login Plugin for WordPress Login Page DisclosurePatch nowKEVEPSS 1.23%Jan 23, 2026
- Unknownevenroute iqrouter_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.23%Jan 23, 2026
- Critical9.8Langflow Inclusion of Functionality from Untrusted Control Sphere VulnerabilityPatch nowKEVEPSS 63.01%Jan 22, 2026
- Critical9.3SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 96.54%Jan 22, 2026
- UnknownLinksys re6250_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 6.81%Jan 22, 2026
- UnknownTenda ac1206_firmware Improper Restriction of Operations within the Bounds of a Memory BufferPatch nowKEVEPSS 1.75%Jan 22, 2026
- UnknownNETGEAR d6400_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')Patch nowKEVEPSS 12.13%Jan 22, 2026